AMENDMENTS TO THE SPECIFICATION 

Please replace Paragraph [0024] with the following paragraph rewritten in 
amendment format: 

[0024] Each user access point preferably has the properties of a managed 
layer 3 switch. First, each user access point must enforce the association of IP address 
and MAC add rose Media Access Control (MAC) Address with a particular port. This 
requirement his applicable to either a wired and wireless cabin environment. A second 
requirement for each user access point is to accept a command to shut off its access 
port. In the case of a wireless access device, a communication channel consisting of a 
particular frequency, time division or sub-frame substitutes for the physical access port. 
A third requirement for each user access point is to preclude passengers from 
eavesdropping or receiving Ethernet packets not directly addressed to them. In a wired 
cabin distribution system, this can be accomplished through the use of a switched 
Ethernet architecture. In a wireless cabin distribution system, this can be accomplished 
through the use of "channel level encryption" specific to a particular user. 
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Please amend the Abstract section of the specification as rewritten in 
amendment format. 

ABSTRACT OF THE DISCLOSURE 
An airborne security management system is provided for monitoring security 
activities in a mobile network platform. Th e a i rborn e socur i ty managomont This system 
includes a mobile network that is interconnected via an unreliable communication link to 
a terrestrial-based network security management system; an intrusion detection system 
connected to the mobile network and operable to detect a security intrusion event 
whose origination is associated with the mobile network; and a mobile security manager 
adapted to receive the security intrusion events from the intrusion detection system. 
The mobile security manager is operable to transmit a message indicative of the 
security intrusion event to the network security management system and to perform 
security response activities in response to security commands received from the 
network security management system. The mobile security manager is further operable 
to command security response activities on the mobile network platform, when the 
mobile network platform is not connected with network security management system. 
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